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Preface 


This  National  Institute  of  Standards  and  Technology  Interagency  Report  (NISTIR) 
presents  a disaster  recovery  methodology  developed  by  Advanced  Information 
Management,  Inc.,  under  contract  to  the  U.S.  Department  of  State.  This  NISTIR 
contains  the  Domestic  Disaster  Recovery  Plan  for  PCs.  OIS.  and  Small  VS 
Systems. 

The  National  Institute  of  Standards  and  Technology  (NIST)  makes  no  claim  or 
endorsement  of  this  methodology.  However,  as  this  material  may  be  of  use  to 
other  organizations,  the  report  is  being  reprinted  by  NIST  to  make  it  publicly 
available  and  to  provide  for  broad  dissemination  of  this  federally  sponsored 
work.  This  publication  is  part  of  a continuing  effort  to  assist  federal 
agencies  in  accordance  with  NIST’s  mandate  under  the  Computer  Security  Act  of 
1987. 

NIST  expresses  its  appreciation  to  the  U.S.  Department  of  State  and  Advanced 
Information  Management,  Inc.,  for  their  permission  to  publish  this  report. 

Questions  regarding  this  publication  should  be  addressed  to  the  Associate 
Director  for  Computer  Security,  National  Computer  Systems  Laboratory,  Building 
225,  Room  B154,  National  Institute  of  Standards  and  Technology,  Gaithersburg, 
MD,  20899. 

Additional  copies  of  this  publication  may  be  purchased  through  the  National 
Technical  Information  Service,  Springfield,  VA,  22161,  telephone:  (703)  487- 
4650. 
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U.S.  DEPARTMENT  OF  STATE 
DOMESTIC  DISASTER  RECOVERY  PLAN 
FOR  PCs,  OIS,  AND  SMALL  VS  SYSTEMS 


I.  INTRODDCTION 

No  computer  system  is  exempt  from  potential  failure.  Whether  due  to 
a natural  disaster  such  as  fire,  or  mechanical  failure  such  as  a hard  disk 
crash,  the  loss  of  your  data  processing  support  and  perhaps  some  critical 
information  is  a possibility  for  which  you  must  prepare.  You  must  have 
some  way  to  recover  critical  records  and  to  continue  your  work.  This 
disaster  recovery  plan,  properly  executed,  will  provide  that  capability, 

0MB  Circular  A-130,  "Management  of  Federal  Information  Resources," 
requires  the  development  of  contingency  plans  by  end-users  of  computer 
applications.  This  plan  is  designed  to  meet  that  requirement  and  should 
require  less  than  two  hours  to  complete.  It  will  give  you  a known  way  to 
return  quickly  to  operation  shoxild  your  system  fail.  You  may  wish  to 
include  more  than  one  computer  in  this  plan.  If  you  have  similar 
stand-alone  computers  that  require  the  same  backup  strategy,  data  backup, 
and  interim  processing,  this  plan  can  be  adapted  to  the  entire  group. 
When  your  plan  is  completed,  all  personnel  involved  in  the  recovery 
efforts  should  be  given  a copy. 


H.  FLAN  DEVELOPMENT 

A.  Criticality  AaaessBent 

The  length  of  time  that  your  system  can  be  out  of  operation 
before  the  impact  is  unacceptable  (maximum  acceptable  delay)  forms  the 
foundation  needed  to  establish  an  effective  plan.  Factors  to  consider 
are: 


Impact  on  the  operation  (i.e.,  lowered  employee 
productivity,  inability  to  respond  to  operational  needs, 
etc.) 
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- Additional  cost  of  overtime  pay  necessary  to  catch  up 

- The  morale  of  your  of f ice/Bureau  and  the  image  of  the  Department 

Accurate  determination  of  the  maximum  acceptable  delay  provides  the 
baseline  for  recovery  planning.  When  this  is  knovra,  it  will  help 
determine  your  backup  strategy  (i.e.,  whether  a standby  system  is 
required) . 


B . Backup  Strategy 

Standard  vendor  hardware  maintenance  agreements  will  cover  system 
breakdowns  but  will  not  cover  loss  due  to  fire  or  other  disasters.  If 
after  consultation  with  your  vendor,  your  equipment  is  declared 
unsalvageable,  replacements  may  be  ordered  by  your  executive  office 
through  A/ISO/USS. 


In  the  event  timely  repair  or  replacement  of  computer  equipment 
cannot  be  concluded,  alternative  arrangements  must  be  made: 


Manual  processing  including  the  use  of  typewriters  for  the 
drafting  of  cables  and  memos 

The  use  of  reciprocal  agreements  that  would  provide  you  the  use 
of  another  office's  equipment  until  your  service  is  restored. 
Reciprocal  agreements  can  be  concluded  with  another  office  in 
the  same  Bureau  or  with  another  Bureau  which  uses  similar 
equipment.  The  computer  at  the  backup  site  should  be  tested  to 
ensure  that  your  disk  drives  can  be  accommodated  and  that  the 
operating  systems  are  compatible.  In  addition,  an  actual  test 
of  the  system  will  verify  whether  there  is  enough  memory  to 
accomodate  shared  processing. 


The  responsibility  of  relocating  your  replacement  equipment  if  your 
room  or  building  becomes  unusable  rests  with  the  executive  director  of 
your  Bureau  in  coordination  with  the  General  Services  Administration. 


C . Data  Backup 

It  is  critically  important  that  the  right  data  be  available.  The 
proper  schedule  for  backing  up  your  system  is  based  on  the  timeliness  of 
your  records  and  the  effort  required  to  reenter  data. 
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"System  Security  Standard  IV",  Security  Standards  for  Unclassified 


Automated  Information  Systems  in  the  United  States,  discusses  the 
importance  of  an  effectiye  software  and  data  file  backup  program.  You 
should  consider  how  long  it  would  take  to  bring  a two-day  old  file 
up-to-date.  How  long  for  a three-day  old  file?  As  you  ask  these 
questions,  you  will  develop  an  understanding  of  how  often  you  need  to  do 
backups.  Balance  the  time  it  takes  to  back  up  your  files  with  the  need 
you  have  for  current  information.  Based  on  that  trade-off,  determine  the 
most  effective  backup  schedule. 

It  is  necessary  to  determine  a safe  place  for  storage  of  the  backup 
files.  A general  rule  is  that  the  backup  files  should  be  a sufficient 
distance  away  from  the  original  files  so  that  a disaster  that  impacts  the 
original  files  will  not  also  impact  the  backup  files.  For  example,  if 
you  are  keeping  your  backup  files  in  a storage  area  close  to  your 
equipment,  a fire  will  probably  destroy  both.  It  is  best  to  store  your 
files  (labeled  with  date  of  backup,  highest  security  classification, 
identification  of  contents,  operator  initials,  and  expiration  date)  in 
another  section  of  your  Bureau,  away  from  the  central  processing  unit. 

If  no  secure  storage  area  is  available  within  your  Bureau,  storage  areas 
in  other  Bureaus  should  be  investigated.  All  files  must  be  stored  in 
United  States  Government  facilities.  Forms  and  other  specialized 
supplies  should  also  be  maintained  in  a backup  storage  location.  Should 
your  records  contain  classified,  controlled  or  sensitive  information, 
special  precautions,  e.g.  storage  in  an  approved  security  container,  must 
be  taken.  Please  refer  to  "System  Security  Standard  1,  "Security 
Standards  for  Classified  Automated  Information  Systems  in  the  United 

States"  and  "System  Security  Standard  IV",  Security  Standards  for 
Unclassified  Automated  Information  Systems  in  the  United  States,  for 

further  guidance  in  this  area.  Unclassified  files  must  be  stored  in  a 
room  with  a DS  approved  lock. 

In  addition,  it  may  be  appropriate  to  store  backup  files  in  two 
places;  one  close  by,  in  case  of  simple  equipment  failure  or  accidental 
erasure  of  files,  and  one  further  away  in  case  of  large  scale  disasters. 
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such  as  fire  or  water  damage.  Files  that  are  kept  close  at  hand  are 
typically  used  for  convenience  rather  than  backup  purposes. 

Do  not  overlook  the  possible  need  to  have  source  data  available  so 
that  you  can  re-create  electronic  records  that  might  have  been  lost  due 
to  the  outage.  There  will  be  records  created  after  the  last  backup  for 
which  there  may  not  be  duplicates.  Should  you  be  eJale  to  re-create  this 
information  from  paper  records?  If  you  cannot  arrange  for  re-creation, 
you  should  reconsider  the  frequency  of  record  backup  so  as  to  minimize 
the  impact  of  lost  records. 

D.  Interim  Processing 

The  need  for  interim  processing  capability  will  be  based  on  two 
factors:  The  criticality  of  your  processing  (how  long  you  can  remain 

without  ADP  support)  and  your  arrangements  to  recover  from  a disaster. 
Plans  must  be  in  place  to  allow  your  department  to  continue  operations  on 
a limited  basis  until  adequate  ADP  support  can  be  restored.  This  may 
include  use  of  personal  computers,  sharing  of  word  processors  with 
others,  or  manual  operations.  At  a minimum,  the  interim  plan  should 
allow  critical  business  functions  to  continue  and  provide  a means  to 
rapidly  recover  word  and  data  processing  capabilities. 

III.  PREPASING  FOR  A DISASTER 

To  carry  out  the  strategy  that  has  been  developed  in  the 
previous  sections,  several  key  functions  must  be  performed.  These  are 
normally  associated  with  the  positions  of  the  Disaster  Recovery  Manager 
and  the  System  Administrator.  Depending  on  the  size  of  the  organization, 
the  positions  may  be  the  same  person: 

Disaster  Recovery  Manager  (DRM)  is  responsible  for: 

a.  Keeping  the  disaster  recovery  plan  current 

b.  Declaring  a disaster  and  supervising  the  recovery 
process 
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c.  Providing  the  State  Department  Information  systems 

Security  Office  (DS/ST/ISS)  with  a short  After-Action 
Report  on  the  disaster  and  the  recovery 

The  System  Administrator  is  responsible  for: 

a.  Keeping  the  interim  operating  plan  current 

b.  Deciding  when  to  contact  the  DRM  for  initiating  the 
recovery  process 

c.  Providing  the  DRM  with  a short  After-Action  Report  on 
the  disaster  recovery  efforts 

To  effectively  accomplish  the  tasks  necessary  at  the  time  of  an 
emergency,  there  are  several  specific  items  that  will  be  of  great 
assistance : 


Notification  Lists.  The  names  and  phone  numbers  of  the 
personnel  involved. 

Inventories.  It  is  important  to  know  what  is  needed  and  on  hand 
for  backup  operations.  Inventories  are  necessary  for  the 
following : 


. Equipment 
. Software 
. Data 

. Supplies  and  Materials 
. Transportation 


These  may  be  simple  lists  of  only  a few  items  or  they  may  be  more 
complex  and  require  word  processing  support. 


IV.  DISASTER  RECOVERY  PLAN 

The  Disaster  Recovery  Plan,  Attachment  A,  should  be  completed  and 
kept  up  to  date  as  the  situation  changes.  A copy  of  the  blank  plan 
should  be  kept  for  updating  individual  pages  and  the  document  should  be 
typed  for  ease  of  reading. 
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CHAPTER  I 
OVERVIEW 


A.  INTRODUCTION 

The  Disaster  Recovery  Plan  has  been  prepared  to  define  the  procedures 
and  instructions  for  dealing  with  contingency  situations  that  may  render 
the  computer  support  inoperative. 

This  plan  is  divided  into  five  chapters:  I.  Overview,  II.  Emergency 
Responses,  III.  Backup  Operations,  IV.  Recovery,  V.  Maintenance,  VI. 
Testing.  Each  chapter  contains  a narrative  section  plus  any  appendixes. 
The  narrative  sections  are  not  expected  to  change  frequently,  but  the 
appendixes  will  change  because  they  contain  more  dynamic  data. 

B.  UPDATING  THE  PLAN 

Changes  are  expected  on  a continuing  basis.  Consequently,  it  is 
important  to  note  all  changes  as  received  and  to  record  the  actions  as 
listed  in  Appendix  I-A,  Record  of  Updates, 

C.  SAFEGUARDING  THE  PLAN 

While  this  plan  does  not  contain  classified  information,  it  is 
advisable  that  the  information  not  be  distributed  indiscriminately  and  be 
limited  to  those  with  a need  to  know.  A copy  should  be  stored  in  the 
off-site  storage  location. 

D.  RESPONSIBILmES 

The  Disaster  Recovery  Manager  (DRM)  is  responsible  for  keeping  the 
plan  current,  declaring  a disaster,  supervising  the  recovery  process,  and 
providing  information  to  a higher  authority  using  Appendix  I-B, 
After-Action  Report, 
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The  System  Administrator  is  responsible  for  keeping  interim 
processing  plans  current,  providing  emergency  response  actions,  and 
informing  the  DRM  as  necessary. 

The  names  and  phone  numbers  of  the  DRM,  the  System  Administrator,  and 
other  key  people  are  listed  in  Appendix  I-C,  Responsible  Individuals, 

E.  CONCEPT  OF  DISASTER  RECOVERY 

In  the  event  of  a disaster  affecting  the  computer  capability,  an 
alternate  processor  will  be  identified,  and  the  necessary  data  and 
previously  saved  software  will  be  obtained  and  loaded  onto  the  system. 

To  provide  this  capability,  backup  data  and  software  will  be  recorded 
and  maintained  at  an  off-site  location  not  subject  to  the  same  potential 
disaster.  The  backup  data  and  software  requirements  and  locations  are 
contained  in  Appendix  I-D,  Backup  Data  Procedures, 

F.  ACTION  LOG 

During  a recovery  it  is  easy  to  overlook  a key  element  in  the  backup 
and  recovery  process.  Appendix  I-E,  Action  Item  Checklist,  contains  a 
checklist  of  necessary  actions.  In  addition  a chronological  log  of 
specific  actions  should  be  kept. 
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APPENDIX  I-A 
REOORD  OF  UPDATES 


CHANGES  MADE 


Action 

Page  ^ Taken 


Date 


Name  of 

Person  Updating 


Updates 

Distributed  To 
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APPENDIX  I-B 
AFTER-ACTION  REPORT 


Site 


Date  of  Occurrence 


Date  of  Report 


1.  Describe  Disaster 

(Briefly  describe  the  events  that  led  to  Contingency  Implementation.) 


2.  Describe  Contingency  Operations 

(Briefly  describe  how  operations  were  returned  to  normal  conditions. 
Include  approximate  time  to  recover.) 

Name  of  Reporter:  
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APPENDIX  I-C 
RESPONSIBLE  INDIVIDDALS 


DISASTER  RECOVERY  MANAGER 

Name:  

Phone:  (Office)  

( Home ) 

Alternate  Disaster  Recovery  Manager: 

Phone:  (Office)  

(Home)  


SYSTEM  ADMINISTRATOR 

Name:  

Phone:  (Office)  

(Home)  

Alternate  System  Administrator: 

Phone:  (Office)  

(Home)  


VENDOR  SUPPORT 

Company  Name:  Site  No. 

Phone:  (Office)  
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APPENDIX  I-D 
BACKUP  DATA  PROCEDUHES 


Back  up  of  files  and  records  will  be  made  no  less  than  every 
days.  Back  up  usually  conducted  on  . 

Backup  data  and  software  is  located  at: 

Building  

Address  

Room  Number  

Stored  In/On  

City  

State  Zip  

Phone  ^ 


is  responsible  for  backup  procedures 

and  can  be  reached  at  (Office)  - - and  (Home)  - , 
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APPENDIX  I-E 
AiJirlOW  ITEM 


Action 


Date/Time 


Assess  situation 

Emergency  determined;  begin  recovery  operations 
Notify  all  users 

Notify  alternate  equipment  provider 

Get  backup  data/software 

Begin  Interim  Processing 

Implement  backup  equipment 

Load  software 

Load  data 

Initiate  system 

Check  system  functions 

Check  backup  data  status  (how  current) 

Update  data  if  needed 
Check  system  operation 
Begin  backup  operation 

Recovery  complete,  return  to  normal  processing 
File  report  with  ISS 


Initials 
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CHAPTER  II 
EMERGENCY  RESPONSE 


A.  PURPOSE 

The  purpose  of  this  chapter  is  to  prescribe  the  initial  actions  to  be 
taken  in  the  event  of  an  emergency. 

B.  CONCEPT  OF  EMERGENCY  RESPONSE 

The  following  list  provides  emergency  phone  numbers  for  use  during  a 
crisis: 


EMERGENCY  CAT.T.S 

Boab  Threats  or  Other  Danger  Requiring  Inaediate  Action: 


Eaergency  Medical  Assistance: 


Fire: 

Police: 

Safety  Office: 
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The  Safety  Division  (A/OPR/ SAF)  distributes  the  "Occupant  Emergency 
Plan"  which  provides  instructions  for  actions  to  be  taken  in  case  of  fire, 
bomb  threats,  or  disaster  emergencies.  Copies  of  this  emergency  plan  are 
available  through  your  executive  office  or  by  contacting  the  Safety 
Division. 

In  addition,  the  Fire  Safety  and  Hazard  Control  Division  (A/FBO/FIRE) 
distributes  pamphlets  on  fire  safety  and  prevention.  Examples  of  these 
booklets  are:  "Understanding  Portable  Fire  Extinguishers"  and  "About  High 
Rise  Fire  Safety,"  A publication  entitled  "Guidelines  for  Fire  Protection 
of  Essential  Electronic  Environments"  is  geared  toward  larger  data 
processing  centers. 

C.  FAILTTKE  ASSESSMEIfr 

It  is  imperative  that  an  assessment  be  made  as  quickly  as  possible  of 
the  probable  time  to  repair  and  restart  the  system.  This  may  be  quite 
obvious  or  may  require  that  the  customer  engineer  be  called  to  obtain  an 
accurate  estimate.  As  soon  as  the  assessment  is  made,  the  DRM  should  be 
notified  so  that  a decision  on  recovery  implementation  can  be  made. 

To  accomplish  Failure  Assessment  effectively,  it  is  necessary  to  have 
available  lists  of  equipment,  software,  and  data.  Appendix  II-A, 

D.  AFTER-ACTION  REPORT 

An  After-Action  Report,  Appendix  I-B,  should  be  filed  with  the  DRM 
two  weeks  after  recovery  of  disaster. 
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APPENDIX  II-A 
INVENTORIES 


(Use  additional  sheets  if  required) 

EQUIPMENT  COVERED 

List  hardware  maintained  by  your  office: 

Model  ^ P,  Order  # Item  Serial  ^ Vendor 


Location 


II-A-1 


SOFTWARE  OOVKKKD 


List 

each 

critical  software  (operating  system  and  applications).  What 

supports: 

ID 

Person 

Name  Version  Vendor  Language  Responsible 

II-A-2 


DATA  COVERED 

List  database  and  files.  This  may  include  data  for  any  function, 
(e.g..  Passport  database,  form  letters,  accounting  records,  etc.) 


ID  Name  of  Data  Owner 


Description 


Backup 

Frequencies 


SUPPLIES  AND  MATERIALS  FOR  BAOCDP  OPERATIONS 

As  of:  (Date)  Last  Inspected: 


(Date) 


Description 


Quantity  Required  Quantity  on  Hand 
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TRANSPORTATION 


Vehicle  Number 


Passenger  Capacity 


Load  Capacity 
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CHAPTER  III 
BACKITP  OPERATIOWS 


A.  PURPOSE 

The  purpose  of  this  chapter  is  to  provide  instructions  for  the 
activation  of  the  backup  operations  plan, 

B.  DISASTER  RECOVERY  CONCEPT 

There  are  three  potential  techniques  for  recovery:  Replacement  of 
Equipment,  Mutual  Assistance,  or  Manual  Processing,  The  approach  selected 
should  be  indicated  here  and  the  details  placed  in  Appendix  III-A,  Backup 
Concept: 

- Replacement  of  Equipment 

- Mutual  Assistance 

- Manual  Processing 

C.  INTERIM  PROCESSING 

In  some  cases  it  may  be  necessary  to  implement  interim  processing  for 
specific  critical  applications.  Each  such  application  is  detailed  in 
Appendix  III-B,  Interim  Processing  Requirement, 

D.  AFTER-ACTION  REPORT 

An  After-Action  Report,  Appendix  I~B,  shoxild  be  filed  with  the  DRM 
two  weeks  after  recovery  of  disaster. 
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APPENDIX  III-A 
BACKDP  CONCEPT 


If  a disaster  occurs  that  indicates  that  the  system  will  not  be 

available  for  more  than  (days/hours),  the  DRM  or  other  authorized 

person  will  declare  that  the  disaster  plan  should  be  implemented.  This 
should  be  indicated  on  the  Action  Item  Checklist  (Appendix  I-E) , 

If  system  restoration  is  necessary,  it  will  be  accomplished  by  (check 
and  complete  the  appropriate  plan) : 

Replacement  Equipment: 

Responsible  Individual  

Phone:  (Office)  

(Home)  


Equipment  will  be  shipped  to: 


Equipment  will  be  available  within  (days/hours) 

of  notification. 
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Use  of  equipment  of  an  organization  with  whom  a mutual 
assistance  agreement  has  been  negotiated: 


Name  of  Organization  _ 
Responsible  Individual 

Phone:  (Office  ) 

( Home ) 

Building  

Address  

Room  Number  

City  

State  Zip 


Type  of  equipment 

Vendor  

Model  

Operating  System  and  Release  Number  

Mode  of  Operation:  Shared  

Dedicated  

Number  of  workstations  available  for  use  

Number  of  printers  available  for  use  

Compatibility  of  application  hardware,  i.e., 
memory  size,  disk  format,  graphics  and 

magnetic  media  compatibility  

Equipment  is  approved  for  unclassified  

LOU  , Confidential  , and 

Secret  processing. 

Equipment  can  be  utilized  within  

(days/hours)  of  notification. 
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APPENDIX  III-B 

INTERIM  PROCESSING  REQUIREMENT 


APPLICATION: 


Method  of  Accomplishment: 

Manual 

Backup  Automation  Support 


Description: 


(Repeat  as  Necessary) 
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CHAPTER  IV 
RECOVERY 


A.  PURPOSE 

The  purpose  of  this  chapter  is  to  establish  procedures  for  restoring 
normal  computer  operations. 

B.  OOHCEPT  OF  RECOVERY 

Regardless  of  how  well  planned  and  executed  the  backup  operations 
are,  when  the  computer  center  is  destroyed,  they  will  be  something  less 
than  optimal.  Restoration  of  the  primary  facility  will  therefore  be  of 
prime  importance. 

Because  of  the  wide  range  of  potential  situations,  it  will  be 
necessary  to  plan  the  recovery  based  on  the  condition  of  equipment  and 
facilities  at  the  time  of  the  disaster.  The  approach  will  be  to 
individually  assess  the  recovery  potential  of  specific  elements  and  to 
combine  these  elements  into  a recovery  plan.  The  plan  outline  is 
contained  in  Appendix  IV-A,  Recovery  Plan  Outline. 

C.  INVENTORIES 

The  inventories  contained  in  Appendix  II-A  will  be  equally  useful  for 
recovery  planning. 

D.  AFTER-ACTION  REPORT 

An  After-Action  Report,  Appendix  I-B,  should  be  filed  with  the  DRM 
two  weeks  after  recovery  of  disaster. 
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APPENDIX  IV-A 
REOtJVKRY  PLAN  OUTLINE 


I.  EQUIPMENT 

Item 


Serial  if 


Repair 


Replace  Available  Date 


II.  SOFTWABE/DATA 

ID  Backup  Storage 


Date  of 
Backup 


Update  Needed  Available  Date 
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III.  FACILITY 

Repairs  Needed  Performed  By 


Available  Date 


IV.  OTHER  ACTIONS  NECESSARY 

(Communications,  Personnel,  etc.) 
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CHAPTER  V 
MAmTERANCE 


A.  PURPOSE 

The  purpose  of  this  chapter  is  to  prescribe  specific  actions 
necessary  to  ensure  that  this  plan  is  kept  up-to-date. 

B.  CONCEPT  OF  HAINTBNANCE 

Appendix  V-A,  Maintenance  Index,  lists  the  maintenance  actions 
necessary.  Space  is  provided  to  assign  responsibility,  frequency  of 
action,  and  date  of  accomplishment. 
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APPENDIX  V-A 
MAINTENANCE  INDEX 


Section 


I-C  Notification  Lists 
I-D  Backup  Procedures 

II-A  Inventories 

III-A  Backup  Concept 
III-B  Interim  Processing 

IV-A  Recovery  Plan 
Overall 


Responsibility 

Office  Name 


Frequency 


Date  Last 
Updated 


As  required 

Quarterly  or 
as  changed 

As  changed 

As  changed 

As  changed 

As  changed 

Quarterly 
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CHAPTER  VI 
TESTING 


You  may  wish  to  perform  operational  testing  at  your  selected  backup 
facility  once  or  twice  a year. 

Each  testing  session  should  last  for  no  more  than  one  day  and  should 
be  cleared  in  advance  with  both  system  managers.  Before  testing  you 
should  consult  with  your  equipment  vendor  to  insure  that  proper 
procedures  are  followed  when  transporting  and  reloading  your  media. 

Testing  shold  be  performed  in  the  same  mode  of  operation  (shared  or 
dedicated)  as  provided  for  in  the  mutual  assistance  agreement. 

Operational  testing  is  beneficial  because  it  identifies 
incompatibilities  between  the  two  systems.  For  this  reason,  it  is 
important  that  the  system  managers  at  both  data  processing  sites  receive 
advance  notice  of  software  and  hardware  changes. 
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